CyberRota Analysis
AI-GeneratedA vulnerability exists in the Enquirer library versions up to 2.4.1, specifically in the Enquirer.set function of the Public Package API, allowing remote attackers to manipulate the question.name argument. This manipulation can lead to unauthorized modifications of object prototype attributes, potentially compromising application integrity. Developers and organizations utilizing the Enquirer library should prioritize patching this flaw to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in enquirer up to 2.4.1. Affected is the function Enquirer.set of the component Public Package API. The manipulation of the argument question.name results in improperly controlled modification of object prototype attributes. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report.